Greg "Scripting Guy" Stemp and I have collaborated on a blog entry today.  If you're interested in some of the security issues surrounding random number generation in VBScript, check out his blog:

http://blogs.msdn.com/gstemp/archive/2004/02/23/78434.aspx